Previous Topic: Upgrade r12 or r12.5 Environments with Access RolesNext Topic: Add Support for Roles Modified in Provisioning Manager


Update Role Definitions

Your first upgrade from CA Identity Manager r12 or r12.5 requires an update of role definitions as defined in the following steps. This update is required to include new role and task definitions, however, this update does not modify currently established roles in the environment by including new tasks. This restriction avoids unwanted changes to an already configured and functioning environment. However, after updating role definitions, you can modify any role to include a new task.

Follow these steps:

  1. In the Management Console, click Environments.
  2. Select the environment.
  3. Go to Role and Task Settings.
  4. Click Import.
  5. Scroll up to see role definition files under the heading, Category: Upgrade to 12.5SP.
  6. Select a single role definitions file based on the following table:

Role Definitions File

Source for Upgrade

Provisioning Server

Organization in User Store

Upgrade-12-to-12.5SP-RoleDefinitions-NoOrganization.xml

r12

No

No

Upgrade-12-to-12.5SP-RoleDefinitions-Organization.xml

r12

No

Yes

Upgrade-12-to-12.5SP-RoleDefinitions-ProvisioningNoOrganization.xml

r12

Yes

No

Upgrade-12-to-12.5SP-RoleDefinitions-ProvisioningOrganization.xml

r12

Yes

Yes

Upgrade-12.5-to-12.5SP-RoleDefinitions-NoOrganization.xml

r12.5 or higher

No

No

Upgrade-12.5-to-12.5SP-RoleDefinitions-Organization.xml

r12.5 or higher

No

Yes

Upgrade-12.5-to-12.5SP-RoleDefinitions-ProvisioningNoOrganization.xml

r12.5 or higher

Yes

No

Upgrade-12.5-to-12.5SP-RoleDefinitions-ProvisioningOrganization.xml

r12.5 or higher

Yes

Yes

For example, if the CA Identity Manager environment was created for r12.5 SP2, it uses a provisioning server, and the CA Identity Manager user store has a flat hierarchy (no organization), select the following file:

Upgrade-12.5-to-12.5SP-RoleDefinitions-ProvisioningNoOrganization.xml.

After you import the role definition file, you can view and execute new tasks by assigning them to the appropriate admin role.